How can i settings IDA show me string instead of offset_xxx?
- 2could you please add a text dump of the screenshot as well as the disassembly listing of the highlighted locations?Igor Skochinsky– Igor Skochinsky ♦2018-06-12 18:35:05 +00:00Commented Jun 12, 2018 at 18:35
Add a comment |
2 Answers
Go to the menu Edit -> Plugins -> Hex-Rays Decompiler. A window will appear with information about the Hex-Rays plugin. Click Options and you should see a dialog like this:
Click on Analysis options and uncheck Print only constant string literals:
I learned about this option from the great Life In Hex blog, but I cannot find the post right now...
Have you tried changing the prototype of the function licensed_to() so the 2nd argument is "const char *" and, also, have you made a string at the given offset? If not, go to the address in that offset and press 'a' (or Alt+A and then select "Unicode").
- Not sure i did it right but... i.imgur.com/fO54LAi.png and i.imgur.com/EziDXAB.pngbeo sen– beo sen2018-06-12 11:58:39 +00:00Commented Jun 12, 2018 at 11:58
- I think it's a char **, not a char *. If that's the case, IDA will not show the string (because no string is being passed but rather a pointer to a pointer).joxeankoret– joxeankoret2018-06-12 12:22:32 +00:00Commented Jun 12, 2018 at 12:22